use access control @ * ? username + -, sql excute time log,  introduce yii::app(), set get has flash, del cookies and session at same time, get name of controller and action.