moved unsubscribe endpoint to new user controller