moved auth and create user api tu user controller