finished users controller for m4