added unit test to FormAccessControlService
update FormService advise to not return forms without privilege

fixed post not handled in htmlformentry controller