added update action to user controller. fixed some routes