Changed AclService to MutableAclService, enabling creation/modification
functions of ACLs. Added a getter for sub classes to use.
Refactored controlllers a bit to pull acl service and related
convenience methods to the top level AbstractController class.
Fixed some test (some TODOs remaining though).