change find => where
fix query
accept cross domain
logout