def METHOD_NAME():
    """ secretariat users can request a list of all users """
    res = requests.get(
        f'{env.AWG_BASE_URL}/api/users',
        headers=utils.BASE_HEADERS
    )
    test_user={}
    for user in json.loads(res.content.decode())['users']:
        if user['username'] == 'cps@mitre.org':
            test_user = user
            break
    assert test_user['username'] == 'cps@mitre.org'
    assert test_user['name']['first'] == 'Jeremy'
    assert '"secret"' not in res.content.decode() # check that no secrets are included
    assert res.status_code == 200