small acl package
add role in token
use ACL. simplify auth dispatch process
Merge branch 'master' of https://github.com/stunti/baby-api