update user controller Closes #5