create secure controller