fixed attribute names in users controller