1. Looks like executing users or login api plugins defined [http://www.mysite.com/index.php?option=com_api&app=users&resource=users&format=raw] completely destroy whole sites for a while (jomsocial). Solution for me is to clear all cookies and reload. What is the way to fixed this behavior in com_api component to not interfere in such a way with a site?
2. users api works fine when following line is added to users.php: $this->setResourceAccess('users', 'public'); When this line is commented out following code is returned
message: "Empty password not allowed"
How to force index page to be launched if password not specified in the api. After successful login proper json should be returned.