bugfixes for and completed implementation of ACL for MVC and Navigation