nitweb: add API user login/logout end points