Allow customization of ACL http status

emulate existing error on 404
new tests for model and app settings