start writing up user endpoint