API authorization tuned, UUID for Users thrown away