Ok. Here's a rest interface for User, but without authentication of any kind.
Creating a new User model (tablename: user) with fields for authentication.
Added actions for login and authentication.
Added password reset request and password reset; first crack at user profile.