API: Add UserResource resource and docs

Fix bug 2959
API: Add UserObjectsOnlyAuthorization

This will allow to forbid access to User resources that belong to other users
API: Add statistics to UserResource
UNDO    IGNORE THIS: misc comments