Disallow fq parameter on the legacy search API and force to search only public datasets

The 'fq' parameter should not be publicly available, as it can led to security and privacy issues. Moreover, we need to override it with capacity:public so no private datasets are available.