added user controller, not finished yet