add rspec for users_api