Implement ACL

The ACL includes:
 - Checks if user is allowed to access account if one is specified in
   route with 'accountid'
 - Shows a forbidden page if in an event the error is set to
   ACL_ACCESS_DENIED.