Completed user management for users. Still needs permission checking