user routes and controller tests