changed session based authentication to http basic authentication
updated user api