fixed a bug preventing account unlock, and added very basic ACL