Use pluggable authentication in users internal API