customer controller security