removal of the user controller

The blog api does not really need user auth as the only user that will
actually post thing is the blog author