updated server.js: manageUsers