Adds User serializer and global API permissions