verifying controller actions