API OAuth completed. Need security for users