Fix #631, support Apache 2.4 access control.