api.py goes deeper to User level
merging post.js