Check post id returned when adding post to the set
Add further sets/post ACL tests

Add posts into set/1 in test data
Test guest, user and admin access to set/1/posts. Make sure we get the
right post
count back.
Fix bug in Sets/Post ACL check

= instead of == means we were ALWAYS checking PUT access.