user API done and tested