add security to UserRevocationCtrl & update view