finished basic "allowed" access and kohana user binding