fix userController - id to _id