new authenticate method for API controllers
list of users API
adding assignee combo to task form
create task