fixed correspondance controllers, added security to url