removed users_controller and authorize