completed user controller specs.