update controller users, add create