added route to return a user's list