added /user/ in request mappings for distinguishability between controllers