[FEATURE] divide api per controller

Also adds password functionality to the api, so you can use api.users.verifyPassword()