removed encrypted_id from controller