I've found that when setting limit parameter to something bigger than 20 returns a "400 Bad Request" response.
Any way to fix this?
Not really due to a hard limit of 20 set at the REST API code level which was probably put in place to avoid performance hits when you have a large database of users. This remains to be the case for the latest iteration update of CS 16 as well.