Better handling of ACL. removed non authorised actions and handle correctly 404 / 403. better Ajax feetback on errors

Signed-off-by: David Saradini <david.saradini@me.com>