add subscriptions controller, add as nested route for users