user auth, register, api fixes