application controller has a private method