Access control manager for http resources