refactor name of stored value to user ID
+initial impl for ACL;+initial integratino of ACL;+fixes for user token storage and ret