add user api
add security spec and api
add posts api