added protected to queryForResource example.

Public methods are automatically converted to controller actions, and this is not a public controller action.