user apis and basic auth - not all tested-Arch