modify upload file params
change allowed file content type
modify APIs allowed
refactoring API controller
add paginated price list api
used none paged info json render
prevent access others' orders