Wow, what a ride 
very very nice machine, learned a lot. Thanks @no0ne and @Adamm for the work here.
-
User : All you need is in the login portal. If there is some parameter that is working strange, investigate what is that field and the response given. After that there are interesting tools that would give you some extra information. The process until getting user is long but it deserves. Thanks a lot to @NPCMaster and @farbs for helping here.
-
Root: This is a tricky part, I had the solution but lost a lot of time because it worked sometimes. Now I understand why
