finish making User RESTFul, but still need think about
    1. user.groups
    2. user.checkouts