user controller: create? login? logout etc. first commit