User CRUD

Ref: #2
`user` is already the context key for the request user, AFAIK