REST endpoint for listing users