use new rest resouce for authentication

now uses GET /users/{username}
removed superfluous is_authorized field from response