moved logic from users/show to controller. Added specs