security working after changes to controllers and routes
Merge pull request #55 from blind-squirrel/Sharon

security working after changes to controllers and routes