added user model, controller and routes - still work in progress