separate out users controller