use shibboleth persistent-id as user identifier
change name of shib acl file