controller security implemented