fix bug installer
improve acl, use handlebars & sugarjs, closes #1