all CRUD for User in REST