adding more specs to users and groups controller