updated user route to include login