added routes and controllers for Users