fix user declaration in controller