added user list controller spec, both tests passing