added access control function. Can set acl to be public or give access to a list of webids