added bare User module and implemented acl (ZfcRbac)