Make controller minsafe by adding DI explicitly