private[this] def users(implicit token: SecurityToken) =
    path("/users", GET, Role.createUser, token.role) { request =>
      usersHandler.queryUsers
    } ~ path("/users", POST, Role.createUser, token.role) { request =>
      request.body.flatMap {
        case UserMatcher(id, username, pwd, firstName, lastName, email, roleByTeam, orgId, oldPwd, newPwd) =>
          usersHandler.addUser(id, username, pwd, firstName, lastName, email, roleByTeam, orgId, oldPwd, newPwd).success
        case _ => "Missing params".failure
      }
    } ~ path("/users", DELETE, Role.createUser, token.role) { request =>
      for {
        username <- request.usernameParam
      } yield usersHandler.deleteUser(username)
    } ~ path("/users/password") {
      path("/reset", POST, Role.createUser, token.role) { request =>
        for {
          username <- request.usernameParam
        } yield usersHandler.resetUserPassword(username)
      }
    }