modify update user so that it takes an object as a parameter instead
fix merge conflicts
add routeService which extracted repeated code from controllers, and properly routes based on the cookie