working on user REST