added access control API hook; added hydroshare/res.html as base HTML for new resources