federation-api: /users/{id} returns user's roles and groups instead of a link to a sub-resource