added users.js to server controllers still need to clean it up