Fix deleting of complete acl for oid

When calling deleteAcl() non of the Access-Control-Entries was deleted, due to the criteria beeing wrong. There was a .$id missing.

Also if the oid was not saved (or is deleted) an MongoException occurred when trying to delete the Acl for a non existent oid.

Provided a test for the bug.