2023-06-12 modify auth_api.py to with only needAuth(), checkUserPermission(user, path) method