added new UserController to enable user management