fix /v1/user resource for GET and POST, remove sharedId session info