UsersResource:  fetch by username instead of id
Add new exception for access denied