add users to secret entity and remove separate endpoint