added user to all apiCalls to ensure a authorized use