updated spa, api to provide auth/ get user data