updated users_controller