2.0 acl

This requires cakephp > 2.5.0 which is not released.

The commit we need is cakephp/cakephp@b83b59a9d7d21c35a512182ab923a586c7c6bb6b. Without that commit, we'll have `trigger_error()`ed all over the place.