added users controller and paths
impoved validation rules for users
removed blob images with path