404 on missing items and don't send password on individual get
useradmin model