added new routes for accessing user stuff