added user model, controller, and routes