- initial stab at the user api controller. {its bad and needs to change..}