core: basesite skeleton: install mod_acl_adminonly before mod_authentication

Otherwise it won't work, because mod_authentication depends on an acl module.