fix the user creation route with mongoose