fix #6

revised app.js
revised routes/users.js