not sure why this was removed in the first place

app/controllers/users_controller.rb

@@ -32,7 +32,7 @@ class UsersController < ApplicationController
     #user = User.find(:first, :conditions => ["user_id = ?", "#{params[:user][:user_id]}"])
 
     # user = User.find(:first, :conditions => "user_id = '#{params[:user][:user_id]}'")
-    user = User.where("user_id = '#{params[:user][:user_id]}'").first
+    user = User.find(:first, :conditions => "user_id = '#{params[:user][:user_id]}'")
     if user
       user.skip_user_id_assign = true
       user.skip_hash_password = true