#16 Rewrite routes for auth actions
#8 Implement ACL