Simple ACL alternative for CakePHP 3