update acl rules, add config/security.yml file, update error500 function