auth api, ajax login page
user role
controller-node m/c/a
device m/c/a