fix js bugs, fix user animation, add more server security