optimize javascript config
rewrite public interface
change security config