added protected to queryForResource example.
Public methods are automatically converted to controller actions, and this is not a public controller action.