comment controller added, security added