update app controller to enable cas