adding security for checkin controller