fix public controller security token check