require secure_controller