Add User & AccessToken models and enable ACLs.