-fixed bug with getting role for all users rest call
-added default size to all param maps for performance
-added rest call to get user by id, but this has showed a security hole
that needs to be fixed by moving all api calls for user to new
controller