correct to POST /api/users json object returned