use named routes. simplify specs
create Users controller