add put route for updating a user
return 404 instead of null if user isn't found
rearrange logic
fix logic
barebones oauth structure