users resource
api readability
auth for user api
auth