Add user objs to the user routes

Add note about the get all users needing an admin account