user model, routes, and controller