updated acl
format user
solved bug with reauth
docs