bugfix: wrong path name in controller authorizer default