added user groups controller and its basic functionality
fixed a problem with Acl node lookup