users controller updated