add GET and POST for users