added the ability to specify a url where a json file for role ACL