added ACL for module. ACL for controller should be done in controller init
removed config from module
added layout
allow capital in actions