Points field must be a String to be interpreted that way. Cast it as a number( if you cant change data type to become a number permanently) and you are good.
SELECT * FROM users ORDER BY CAST(points AS unsigned) ASC
And for a Descending order, use
DESC instead of