added api auth, added user settings