fixed 'GET /users/{sid}/items' response format