User management reconsidered as part of the API