add user api
add basic granular authorization