master
rewrite auth on cookie
add notifies
rewrite black list on vault
fix notifies
add subscribe endpoint