finish user management spec