completed first two parts of api: get users and file lists