Add user auth to makeApiRequest and implement some user functionality