add controller tests for different users