Simple routed-based ACL component for express.js base on Ability (https://github.com/scottkf/ability-js)