only get_users has been tested, none of the expressjs code is tested yet