Combine auth request with ACL for improved performance

[jsopenrb]

Currently each publish/subscribe request has to go through the HTTP ACL layer. Even with caching enabled there's a big performance hit when there are a lot of different publish or subscribe topics for each client. It would be very helpful to have an alternative mode where auth request returns a static ACL list in JSON format for a given client session.