added some restrictions on cashier login
merged controller with design