user pages: basic routes & controller