controllerにprivateを設定