private personal information settiing.
 done.
 including, time token to verify. If more than 15mins, need login again if user want to modify these information.