full user controller spec testing