declare user object in controller for finish signup