finished REST actions for User