Fix/unfitting principals in auto completer

* lets timelines use autocompleter on users instead of principals
* limits autocompleter for users and principals to not return anonymous, deleted, ... user
* moves all pagination to specific controller in the api
* removes routes which are no longer necessary