created User controller
fixed routes