Merge remote-tracking branch 'hmslincs/master'
Merge remote-tracking branch 'hmslincs/dev'
Merge remote-tracking branch 'hmslincs/dev'
implement authorization check in API, resolve #170