add user controller to abstract some Sentry/ACL functionality