[ticket/security-155] Cast the types of string values in the controller routes

SECURITY-155