add missing routes for users. add user controller actions