updated authentication API to include logged in user info