Refactored user activity APIs to support custom/dynamic link
Moved root user definition from permission service to user service
Added protection against root user
Removed deprecated ACL plugin
Refactored custom module class hanlder