create users controller and specs