barebones user controller