finish REST actions for users