add UserRestController and tests