added user routes, controller, views, actions (except destroy)