moved requests connected to user managment to separate controller