added user feature spec and preliminary user controller spec

tests are passing locally