refactoring users_controller