fixed bug in user controller