Entity-based ACL: simplifying your server and client side authorization using Node.js