check security for controllers