moved menu item into cms. added ACL, moved controller into adminhtml to standardise