added user index and tests to ensure only logged in users can see the user list
section 9.3.3 - preparing pagination