continued refactoring of CAS auth and acl

almost done. Using a controller action helper to run acl.
Merge pull request #158 from californiavol/imac-work

continued refactoring of CAS auth and acl