/** @see AccessControlManager#getUser(String). */
 @POST
 @Path("/user/get")
 @Produces(MediaType.APPLICATION_XML)
 public User getUser(
     @FormParam("login") String authEmail,
     @FormParam("login-pwd") String authPassword,
     @FormParam("login-secret") String authApiPassword,
     @FormParam("email") String email) {
   AccessControlManager mgr = getAccessControlManager(authEmail, authPassword, authApiPassword);
   User result = mgr.getUser(email);
   mgr.close();
   return result;
 }