User API endpoints now in place

NEED TO DO:

bcrypt passwords
implement JWTs for session