add user controller specs, passing