fixed controllers/users.js