Notice how /users/:userId is above our existing one. This is because the ColdBox router system works from top to bottom to match the route patterns. It uses regex and will use the first route that it finds that matches the pattern. Is this was reversed, the :userid pattern would never run because the more generic pattern would match first.
tldr: Put your more specific patterns above the more generic ones.