add specs for users api