add GET /users admin endpoint