finish CRUD for users