User API (token, creation, pagination)