work on controller security