Controller actions are now protected with login.