feat(user): document /user api

close #2
fix(user): make it apiary valid