user authentication API with user model and ability to filter the model