Add a route for serving up /api/users
Require a login to access the user API