add a JSON serializer for users
properly deserialize user