Create basic acl framework

Fixes #265
That's the id of matt@matt.com