static async removeUsers (req, res) {
    try {
      const { body: { _source: hunt } } = await Db.getHunt(req.params.id);

      if (!hunt.users || !hunt.users.length) {
        return res.serverError(404, 'There are no users that have access to view this hunt');
      }

      const userIdx = hunt.users.indexOf(req.params.user);

      if (userIdx < 0) { // user doesn't have access to this hunt
        return res.serverError(404, 'That user does not have access to this hunt');
      }

      hunt.users.splice(userIdx, 1); // remove the user from the list

      try {
        await Db.updateHunt(req.params.id, { users: hunt.users });
        res.send(JSON.stringify({ success: true, users: hunt.users }));
      } catch (err) {
        console.log(`ERROR - ${req.method} /api/hunt/%s/user/%s (updateHunt)`, ArkimeUtil.sanitizeStr(req.params.id), ArkimeUtil.sanitizeStr(req.params.user), util.inspect(err, false, 50));
        return res.serverError(500, 'Unable to remove user');
      }
    } catch (err) {
      console.log(`ERROR - ${req.method} /api/hunt/%s/user/%s (getHunt)`, ArkimeUtil.sanitizeStr(req.params.id), ArkimeUtil.sanitizeStr(req.params.user), util.inspect(err, false, 50));
      return res.serverError(500, 'Unable to remove user');
    }
  }
DELETE - /api/hunt/:id/user/:user

Remove user(s) from a hunt.
@name /hunt/:id/user/:user
@returns {boolean} success - Whether the remove users operation was successful.
@returns {array} users - The list of users who have access to the hunt.
@returns {array} invalidUsers - The list of users that could not be removed from the hunt because they were invalid or nonexitent.