anchor.diff:  
   # Group Authentication
   
  -## Acquire access token [POST /auth/login]
  -
  -**Authentication**: No
  -
  -Returns a new access token.
  +## User login [/auth/login]
  +
  +Access tokens are required to access nearly all endpoints of this API.
  +
  +### Retrieve a token [POST]
  +
  +Allows to retrieve a valid JSON Web Token for username and password.
  +
  +**Endpoint information**
  +
  +|                         |     |
  +|-------------------------|-----|
  +| Requires authentication | No  |
  +| Has restricted scope    | No  |
   
   + Request (application/json)
       + Attributes
  -        + login: `john.doe@mail.com` (string) - User email address
  -        + password: `QXR0mi38a2` (string) - User password
  -
  -+ Response 200 (application/json)
  -    + Attributes
  -        + token: `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9....` (string) - JWT
  -
  -## Refresh access token [POST /auth/refresh-token]
  -
  -**Authentication**: Yes
  -
  -Returns a new access token.
  -
  -Tokens that are expired MUST NOT be refreshed.
  +        + login: `john.doe@mail.com` (string, required) - User email address
  +        + password: `QXR0mi38a2` (string, required) - User password
  +
  ++ Response 200 (application/json)
  +    + Attributes
  +        + token: `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9....` (string) - JSON Web Token.
  +
  +## Refresh a token [POST /auth/refresh-token]
  +
  +Allows to retrieve a new, valid JSON Web Token based on a valid JSON Web Token.
  +
  +Expired tokens MUST NOT be refreshed.
  +
  +**Endpoint information**
  +
  +|                         |     |
  +|-------------------------|-----|
  +| Requires authentication | Yes |
  +| Has restricted scope    | No  |
   
   + Request
       + Headers
  
positive.code: 
  + `GET` - *Read* - used to **read** (or retrieve) a representation of a resource,
  + `POST` - *Create* - used to **create** new resources. In particular, it's used to create subordinate resources.
  + `PUT` - *Update/Replace* - used for **update** capabilities, PUT-ing to a known resource URI with the request body containing the newly-updated representation of the original resource. ⚠️ On successful request, replaces identified resource with the request body.
  + `PATCH` - *Update/Modify* - used for **modify** capabilities. The PATCH request only needs to contain the changes to the resource, not the complete resource.
  + `DELETE` - *Delete* - used to **delete** a resource identified by a URI.
  
  
negative.code: + Response 200 (application/json)
      + Attributes (User)
  
  ### Partialy update a profile of the current user [PATCH]
  
  Updates a profile of the current user setting the values of the parameters passed. Any parameters not provided will be left unchanged.
  
  **Endpoint information**
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  + Request (application/json)
      + Headers
  
              Authorization: JWT <token>
      + Attributes
          + name: `Ben` (string) - First name of the user.
  
  + Response 200 (application/json)
      + Attributes (User)
  
  ## User password [/users/me/password]
  
  ### Change a password of the current user [PUT]
  
  Changes user password.
  
  After password is changed all access tokens issued for this user prior to password change must be invalidated.
  
  **Endpoint information**
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  **Error codes**
  
  |       |         |                                           |
  |-------|---------| ----------------------------------------- |
  | `400` | `4001` | Password doesn't match password guidelines |
  
  + Request (application/json)
      + Headers
  
              Authorization: JWT <token>
      + Attributes
          + old_password: `secret` (string, required)
          + new_password: `$3C6e7` (string, required)
  
  + Response 200
      + Attributes
          + token: `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...` (string) - New JSON Web Token.
  
  ## User avatar [/users/me/avatar]
  
  ### Set user avatar [POST]
  
  Sets user avatar.
  
  Either upload the raw binary ( **media** parameter) of the file, or its base64-encoded contents ( **media_data** parameter). Use raw binary when possible, because base64 encoding results in larger file sizes.
  
  **Endpoint information**
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  **Error codes**
  
  |       |         |                       |
  |-------|---------| --------------------- |
  | `400` | `2001`  | File is too large     |
  | `400` | `2002`  | Unsupported file type |
  
  + Request (multipart/form-data)
      + Headers
  
              Authorization: JWT <token>
  
  + Response 200
      + Attributes
          + avatar: `https://...` (string) - Public download URL
  
  ### Delete user avatar [DELETE]
  
  Restores user avatar to the default one.
  
  **Endpoint information**
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  + Request
      + Headers
  
              Authorization: JWT <token>
  
  + Response 204
  
  ## Users [/users]
  
  ### List all users [GET]
  
  Returns a list of users. The users are returned in sorter order, with the most recently created user accounts appearing first.
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  + Request
      + Headers
  
              Authorization: JWT <token>
  
  + Response 200 (application/json)
      + Attributes (array[User])
  
  ## User [/users/{id}]
  
  + Parameters
      + id: `a6vhAo3FG7t1` (string) - id of the user.
  
  ### Retrieve a user [GET]
  
  Retrieves the details of an existing user.
  
  |                         |     |
  |-------------------------|-----|
  | Requires authentication | Yes |
  | Has restricted scope    | No  |
  
  **Error codes**
  
  |       |         |                               |
  |-------|---------| ----------------------------- |
  | `400` | `1000`  | Referenced resource not found |
  
  + Request
      + Headers
  