user list route, return as json data to be used by spa