fixed controllers allowed params