fixed the list users route to be GET to /users