Changed authentication endpoint from sessions to users.