New user rest APIs

Yeah, sorry, I thought again it was user.id and not user.idnumber.