finish REST actions for Users resource