users  controller
fix doc and user api