added endpoint for creating an access rule