Fixes #26: Add GET /api/users/:id