added /user app route and updateUser