consider posting to '/users', as per rails restful routes