users controller show now has better query