move createAccount to Users controller