updated users controller spec