#112: add ACL support for basic auth middleware