unlock update controller in finally block (#294)