WIP: specs for user endpoint