Fixed typo in user route: req.send -> res.send
Added userList view and adjusted the auth interceptor to handle 403 response