added user auth api and views