add user model, serializer, add API