complete user controller spec