add serialize controller, and whitelist attributes
add api namespace and users resource to routes