disable debugtoolbar
add group authorization with acls in root resource