fix public detection on method instead
add template using query
add auth.authorized for checking and auth.current for get user info