made users controller only available with signup