A tiny ACL toolkit for Node.js