users controller
add users and pwds