admin-routes for creating decoys
add decoy enum to users