documentation for user controller - take access api request