Only allow admin to update acl

+ Add auth user library and authenticate user making request
+ Only allow update if authenticator is admin

for [galaxy-api/68](https://github.com/cvan/galaxy-api/issues/68)

@cvan  you mentioned something about a script when I first started talking to you about acl? I can't remember what you said.