changing POST API to use user data