added update method to users_controller