delete useless session check in many functions(before_request already checks)
user localstorage to store some user info, move the login check login to Main controller