make call_api public
support tags in upload large
folder listing
secure domain sharding. don't sign version component. url suffix and use root path support