User controller secured