update controller/user.php