added /controls endpoint for control_group (audit) messages