add user auth on user controller