users controller redisign
fix redirect after auth