first pass at routers (controllers) for users, organzations, and api keys