more configurable access control using filters and other minor tweaks