API controller of user