added users api and connect-ensure-login to redirect after auth