I see pinot now has an end point /users access control. Are there any docs on how this works. Any special configuration needed?