add basic accessControl based on derby-examples/auth