finish good delete; encrypt password at frontend; enable image cdn;