remove ensure logged in from user controller