user controller spec complete