move user controller to /users