got routes correct for users