created controller for users