secure actions in dailies controller