get user from webapi