finishing up users controller