add user create api endpoint

- write tests for user create action
- update route to include create