Upgraded to 2.14: iframe widgets permission issue... (no replies)

I embed Piwik to my website using iframe widgets, here is one of the URL that works before 2.14:

https://<my_server.com>/index.php?action=iframe&actionToWidgetize=getCountry&disableLink=1&idSite=71&language=en&module=Widgetize&moduleToWidgetize=UserCountry&token_auth=<my_token>&widget=1&period=range&date=2015-06-09,2015-07-08

but after upgrade to 2.14, it shows:
Error: You can't access this resource as it requires an 'view' access for the website id = 71.

I login admin page to double check:
https://<my_server.com>/index.php?module=UsersManager&action=index&idSite=71&period=day&date=yesterday
[attachment 2334 piwik.png]

the token is correct.

is this a bug?