Authenticated user API moved to REST endpoint