This endpoint should use the path '/tournament/users' and the verb 'GET'. Only users that are in the tournament should have access to this endpoint.