expanded user_controller rspec