Corrected missing parts in AppController.php
Added ACL controlled access.