Create controller for authorize user. TODO: api for retrieve all users