add route for user login and current user