removed password related actions from users controller, not yet needed