added secured annotation to controllers