fix users controller spec, although validations need to be added later