1. An access control system that acts as a firewall for a monetized online content system, wherein said access control system is configured to hide internal processes from a customer utilizing a client computer to access database resources of the monetized online content system, and wherein said access control system comprises a computer system having processing means and memory means operable to provide the monetized online content system, the computer system coupled to one or more resource modules each having data in the memory means, the computer system comprising: an interceptor module configured to: receive a request from the client computer for one or more of the database resources available from one or more resource modules, wherein the request includes user's identity data, a context identifier, a resource identifier, an authentication token and an entitlement token, the entitlement token comprising one way hash of the context identifier, the resource identifier and a secret key corresponding to a specific session, the context identifier indicative of context in which the entitlement token is valid; remove the user's identity data from the received request; refer the request to one or more of the resource modules configured to fulfill the request; receive one or more responses from one or more of the resource modules, at least one of said one or more responses having one or more events associated therewith, wherein the one or more events provide information associated with the database resources accessed by the one or more of the resource modules to generate the one or more responses; and transform the one or more responses by removing the one or more events associated with the one or more responses prior to presentation of the one or more responses to the client computer, thereby hiding the internal processes from the customer utilizing the client computer to access the database resources of the monetized online content system; and an authentication module in communication with the interceptor module, the authentication module configured to authenticate the client computer; wherein the interceptor module further includes code configured to cause the processing means to: identify one or more credentials in the request; determine whether the client computer was most-recently authenticated beyond a defined interval; present, in response to a determination that the client computer was most-recently authenticated beyond the defined interval, the credentials to the authentication module; determine, in response to the authentication module indicating that the client computer is authenticated, whether the entitlement token is valid; and delay, in response to the determination that the client computer was most-recently authenticated beyond the defined interval, the step of referring the request to the one or more resource modules until the entitlement token is determined to be valid.