menu request path and authentication update for setting controller