advanced endpoints, e.g. /user/10/public GET, /user/all/public POST