created user route + updated app.js