api: `wes`, `can`, `roles`, `users` are there
pingback: update `App.backend.req()` && `req.body.plain_text`

* add some comments
* coding style fixes
cfg_default: cleanup