views: rename *.py.html to *.html
add web security api
thing: added user api
Added user controlller