added user controller and routes