add verified field to 'user' controller