fixing api route for users