Add a working Authenticated ACL role

Currently, ACLs are based on contacts belonging to a group. It would be useful if an ACL could be assigned to all authenticated contacts; there's no sane way (and shouldn't be, when one thinks about it) to create a group of all contacts, even those not belonging to any group.