add controller access, simplify request obj