added user check to controller