restore login as a required param so that it can be logged
skip the authorization filter for all methods
- authorization checking is performed by the API internally
Merge branch '1.0.3'
- more bug fixes