enabling ACL for Spot, associating a Spot to a User instead of userId, preparing to enable Tags
trying to figure out Tag model