README.md
add database password
add user controller