just discovered that UserApi was returning the wrong values.

the tests for that api are clearly insufficient.