refactor more controllers
add ban user command