The handler can't be dependency injected (as it's created by the
framework) so, in order to minimise the amount of static
horribleness, pass in a controller which can do the actual work
and have proper dependencies.