polish: unrestrict rest api(no need login, no need authentication. update getPersonImg with exception handler)