updates: users_controller_decorater, check_affiliate is no longer private