Updated authentication in user controller