add image assets, profile vc, twitter login, and default ACL