users controller spec updated