Fixed bugs in chacl and chdefacl.

* The chdefacl command had a bug that you couldn't add an ACL to an empty
  default object ACL.
* The chacl command had a bug that made it so you couldn't delete the
  AllAuthenticatedUsers group from an ACL.
* Added test cases for both.