added user api routes