moved user routes into routers/user.js