Extracted controller security expressions to String constants