test(ApiOAuth): fix email confirmation case
chore(karma): make a dev config that generate HTML coverage report
refactor(app): use stPolicies to keep code DRY