added AccountService.authorization()
added the decorator authorization.
cleanup
added a js object `user` at pages.