add simple unsecured controller