Fix forms list api

```
GET /api/v1/forms/owner
```
 
A user accessing a form list endpoint should only view the forms of the owner that are either public or have been shared with the user.