added users/authentication and api keys