Add user management and api token authentication