UserResource GET all returns only authenticated user or UnAuthorized