fix: authorization, hash of password, views change, events binding