API: Add filtering using field lookups to UnitResource

Units are only listed when a filter is provided

Also expand UnitResource docs to document this feature
API: Add UserResource resource and docs

Fix bug 2959
API: Add UserObjectsOnlyAuthorization

This will allow to forbid access to User resources that belong to other users

Fix bug 2958
API: Add statistics to UserResource

Fix bug 2960
UNDO    IGNORE THIS: misc comments