update controller users.py