add create method to users controller