user controller specs