make the test controller secure and add phpinfo