add auth api method to get authenticated user