limit instance variable in controller