hook up the plumbing for authentication and roles permissions for controllers etc, also using strong parameters
lessen the effect of non public maps