added controller logic and secret view displays username