Added list user api, needs security work