public api for user route