Renamed auth variables.
Also partials are now checked against ACLs.