debugkit plugin
acl setup

currently allow all, but ready to flip switch when app is built
models for all tables