add update action to users_controller