As a bit of extra info, even sending a request to /api/users results in the same empty array.
/api/users