added organization to db
improved user api
重新组织代码增加了bcrypt，完善了authentication & authorization
返回用户内容删除了password
changed header.token to header.authorization, fit http standard