create user controller
user model, auth