Low: controller: validate controller requests better

Use case-sensitive string comparisons, and check for NULL/empty strings early.