fix(controller): set config as the issuing user

closes #2650 
closes #2652