moved /api/user to Party model; cleaned up authService; fixed persistent comments bug; forbidden redirect pending circular dependency issue