Implements CRUD operations on User objects

POST /users
GET /users 
GET /users/:userId
PUT /users/:userId
DELETE /users/:userId

Returns error (403) on duplicate user.username, or user.user.email.  Returns the object created, modified or deleted on those verbs.