acl for student home areas

An acl is now set for /home/users/students to give read access to the staff group.
This could be used in conjunction with an extra samba share to allow staff to see students files.