Added a test route.
Changed default user controller access to false.