Add user APIs: authentication