implements open API server
fix /latest API bug and remove user.js