authentication included
login panel inserted
server /user api begin