v0.2 /users
This prints a list of all the users
Static query
HTML injection via String substitution