users controller specs refactoring