updated route to /user