update controller users.py and model user.py