fix the bug that ACL is not properly saved
fix the bug that ACL is not properly unserialized
bug fix: user login trigger csrf-token not found error ( after login, the session is re-created and havent rebuild csrf-tokens )
added: /debug/error  ( will raise an error )