API fix

api wasnt returning passwords with the getallusers request. corrected by
creating a new user class to pass to the front end and joining the
membership table with the user table