Controllers moved from default package to secure