video 51: protecting controllers and views