users controller
added users controller and routes