Update UserController.php

Prevent direct access