adding users scaffold and allowing api