Improve users controller and add a spec