Add API users, add API authentication