fixes to users API