users controller, orders controller, API methods modified