Made controllers secure by default