routed api/users for get and post