prevent automatic access to controller instance variables and enforce exposure via helper methods
>= 0
Stephan Zalewski