Removed call to backend on ACP change. Should be metadata only.
Removed backend call for set ACP on bucket and object and construct reply direclty in OSG instead of from backend or manager
Fixed acl user lookup for groups. Added some test code as well
Added owner element construction in returned acp on ?acl requests
Fix to short-circuit iam checks for anonymous users when the resource is granted public read/write