updating readme file. adding api controller and its tests. adding a secret token generator. adding basic tests for users.