fixed route protection and read protection
fixed ACL bugs, specially for anonymous read
updated Readme