endpoint for getting user by ID