controller spec for users updated