User model serializer
/users route secured