fixed User controller create/routes