move update action in UsersController to StudentsController