xform share api endpoint

a form id is always unique unless you are using an id string which is allowable here. Also, what endpoint should we use to list all forms for a specific user? Someone can always make a request to different user other than themselves.