[update] login/authentication bug fixes. tornado rest handler 0.0.3