Add users_controller

All control code will be in controller classes, keep everything out of
the routes