add GET /users
local passwords are now crypted