user controller actions disabled