added user routes to routes.rb