finish issue list ui draft
Merge remote-tracking branch 'origin/dev' into dev
fix session API broken and SQL pretection