add post + user API routes