Controllers: added security