use controller spec test for users/update