added ACL system
made global ACL editable by ROLE_ADMIN
removed testing code