add rspec tests to user api controller