add users endpoint, more tests and favor exception for 404