Fix api paths for user authentication