user index page
check authorization
Merge branch 'users' into dev