initial api test, core API functionality is in lib/user.api.js