alot of changes, security, adding controllers