Added ability to enable/disable ACLs & fixed issues with session variable