added user controller, moved routes so they load after mongoose models