moved user logic from routes to controller
design updates