False assumption when fetching the ACL URL

[Vinnl]

I've just scanned through the code, so it might be that I'm interpreting it incorrectly, but as far as I can see here, the AccessControlList class assumes that a Document's ACL is located at the Document's URL with .acl appended to it.

While that's true in Node Solid Server, as far as I know, I don't think that's a requirement. The preferred way to detect the URL is by looking at the Document's Link HTTP header - see e.g. how Tripledoc does it.