CRUD for users, started with auth