main controller now automatically loads users if logged in