sync the users table w/ the sso users table
swappin ports
lock down the api
always include the user id as the request's user value
update tests