updated endpoints to GET user by username