fix attendances_controller to not rely on user_controller