class UserListAPI(Resource):
    @require_oauth(None)
    def get(self):
        user = current_token.user
        return {'user': marshal(user.serialize, user_fields)}

    def post(self):
        if not request.form or \
            not 'username' in request.form or \
            not 'email' in request.form:
                abort(400)
        all_users = User.query.all()
        username = request.form['username']
        email = request.form['email']
        password = request.form['password']
        if email in [user.email for user in all_users]:
            abort(409)
        user = User(username=username, email=email)
        user.hash_password(password)
        db.session.add(user)
        db.session.commit()
        return jsonify({'username': user.username})