added userList route for admin