New feature: define access rules in the ApplicationController.