bugfix: removed "sitemap"=false from securitycontroller