changed the user/:userid response to containing the user object, rather than specific values