separate out updating user and creating new user into separate methods for route + controller.