#76 - added access rule for API endpoint to get a specific user
#76 - added test to user controller for getting a specific user