added: users api calls to the system list
improved security