Added convenience function for finding a user by ID.
Added "json" field tags for the User struct.

This is to limit the marshaling of possibly-sensitive information.
GET /users/{userId}