feat(user): document /user api

close #2