api rest user manager authentication