API: get user by id and catalog_id