#3 - user/:id returns published users only