updates to user controller