I'd save introducing user routes until another pull request since it seems like a larger feature, and since you don't currently have a controller setup to handle these requests.