* added server side acl check to page and content controller