set up access control
adding basic tests for now
more tests. renamed stuff.