API is served under /users/** (Cloud Functions).