change api controllers( add deleted_at,rm admin auth token )