make a separate app for user related api, move /verify/ to /authenticate/, create new /verify (future use) for checking if a UUID is authenticated