CakePHP2: ACL system using controller action annotations