Update UserController.java

避免用户伪造user.id的可能。
Merge pull request #10 from enlangs/master

Update UserController.java by Mr enlangs