changed implementation of api/users and api/groups