updated user controller