created users route with simple validation