User authorization via API (email and password or token done)