Added user controller, and update password action