client and server side mixin declarations
updated allow rules
added tests