Update user_controller.php

trim the input password first before using sha1