added controllers w/ endpoints for users. fixed api_constraints.rb ( extra _r_ was in the method.