added exception to user auth in users controller