RFR added users controller, route, & test