[API-users] Registry API and authentication