fixed user authentication for users views and controller