edited users_controller.rb