model refactoring + specs
fix user list
inject collection as dependency
pulling more logic out of the controller