added separate users controller
authenticate user root route