Done with basic authentication, and most of the user controller