Security-Annotate Controller Methods