added reference to access control in templates doc