api: update user resource to use ID and login