removed dupe from controllers/user.js