Cleaned up "users" controller

Improved readability and error output:
Standardized execution order of error cases
Updated each API to add error cases where necessary (500, 404, 400)
Added comments where necessary