renaming in UserApiController
Auth fixes