Re-added lib/accessControl.js.
Deleted npm-shrinkwrap.json.
Disabled HMAC in config to make testing easier.