added api controller for user