add GET endpoint for /users