bug fixed in CgiFrame first impl of new acl based auth