update README
update TODO.rst
improve the global authentication system