bug fix in users.js