fix controllers for user access