put users API calls under /users/