ACL FIX; config "additionalWhere" directive added; remove unused array fields; AuthenticateController added; UserController unchanged