rewrite `AttendeesController#new`, also simplify routes
nest attendees#create under `users/` for the same reasons as #new