network ACL helpers;

We should have checks for if `from` and `to` are not set so that the app still returns valid JSON instead of crashing