added users controller and spec