Unverified users should not be able to see `/users`

**Describe the bug**
Unverified users should not be able to see `/users`

**To Reproduce**
Steps to reproduce the behavior:
1. Register
2. Log in as registered user (not verified)
3. Fetch `/users`
4. See that users are fetched, but they shouldn't be because you are not verified

**Expected behavior**
1. You shouldn't be able to retrieve a list of users until you are verified
