fixed serializers to suit the current app, added api routes and added controller for users