- updated controller logic for multiple user access