fix javascript property
fix security property
refactor python config
change security class
rewrite rest interface
add public api