Add User controller, add new routes to allow user to update attributes