alfan: secure layout + controler user+ model