ability to reference a context into ACL

- for web, this gives access to the currently logged in user.