video 51- protecting controllers and views