init commit in js ui
@ core/db/models/user.php: Some security bug fixed