* Static files for /manage are served locally
* Added some simple ACL