update to user controller