add ACL to rotate.php