moved to resource.api 1.2
changed social permissions
fixed security problem