User api + js controller