add users resource with auth, NOT DONE YET.