added ability to imitate other user (for SOA API calls)
more fixes to api
updated sample config to reflect the new security (UA & IP based) for API calls