user controller no magic string