modified user_controller.rb