there should be basic API for user management