barely added user model and controller