basic user create, edit, delete, and index working, without auth