add helpers to PHP MustacheEngine
define more auth permissions
add handler authorization