introducing a simple acl subsystem to allow filtering http requests