change req.apiPass to req.authPass to boarden usage scope
0.3.0