Update users.php

added TODOS