specs for users controller refactoring