listing users and groups
POST /users creating user