[BE] User/auth APIs

[duongdev]

Acceptance criteria

• Create new user POST /user
• Fetch user from token GET /auth/me