working acl & working login with permissions & initial admin interface