add acl rule to deny access to some URL