fix API calls to users_controller