* rewrite the logic of authorize.
 * adjust rights for front.
 + add locate support for ajaxJSONER.
 * adjust the cookie format for reply.
 * rewrite the hide logic of thread module.