set up routes for users controller