Change the transition User.in_sas to User.FAIL into controllable.

We can now count on the help of the controller in the avoidance of User.FAIL
=> control: A[] not User.FAIL