update user resource routes and controller