update Users API (completed)