fix controllers after security provider change