added authentication for UserApi