Update UserController.php

Fix access