POST /users takes user id and push token