[FEATURE] divide api per controller

api.createUser -> api.user.create
[FEATURE] add password functionality to api

and fix a couple of small bugs