tests for users controller