api - add institutional admin filters for users show action
API - use find_by_id instead of find in show methods to avoid ActiveRecord exceptions
api - filter selected fields for users
api - filtered selected fields for plans calls withredirect to json
merge dev into token