Add authentication based ACL
 * to execute access controls by username (and group label for future)
fix typo
fix requests to send authInfo if authenticated
fix bug: databases MUST be a object, NOT array
fix to use logger instead of console.log
add comment for engineInfo caching
Add auth module 'http_custom_header'
 * which handle HTTP request custom headers as username and groupname
fix configuration syntax/structure as same with http_custom_header