Adds a single-user api
Removes redundant search_user api
Implemented permissions for user fetch api