remove user transformer in AuthAPIController by add hidden fields in user model
add api/topic/list/{hot,latest,all} api
fix auth/user/login return user object without users block
add api/topic/show/{id} api
merge TopicTransformer and UserTransformer to SingleObjectTransformer
fix dingo facade path
add entrust package to support Role, Permission etc, default user role is User
add checking for banned user before app request start