user sign in/out/up & users index

use update_attributes instead of update_attribute