add_user - now sets an acl so that staff get read access to student home area.