More ACL features

/to @ritch 

1. Support the 'owner' and 'authenticated' smart role
2. Allows the model settings for defaultPermission
3. Add checkAccess for multiple principals/roles and tokens