bug fix in users_controller