feat(collection): support count bypass auth event

Add：new Event Auth， call before request operation.
consider following count:

`GET /foo/count`

with normal user, pass auth.js event, should get collection
count, root is not necessary.
Merge branch 'authorize-request'