[minor] controllers merge in a single user controller
[fix] user's tokens generation
[fix] exit from loop inside private methods