There exists no API for Users, this breaks the PAL/API model and needs addressing. may also involve extending this into other authorization systems.