add /user endpoint