Add registrations resources.
Lock down controllers app-wide, a few other minor updates.