More robust ACL handling in user creation #mapbender/mapbender#52