WebSearch: restricted records in latest additions

* When a record belongs to both a public and a restricted collection,
  no longer display it in the list of latest additions of the
  public collection (in accordance to the outcome of an empty search query
  over the public collection).
  (closes #1315)

* Amend documentation of CFG_WEBSEARCH_VIEWRESTRCOLL_POLICY
  WRT default policy value.

Signed-off-by: Samuele Kaplun <samuele.kaplun@cern.ch>
I have only one doubt here: currently when we display restricted collection splash pages such as: http://cds.cern.ch/collection/ATLAS%20Communications%20Physics?ln=en we indeed do not display any record (because not authenticated users can still access splash pages of restricted collection...

So here I think we should amend this patch to alway remove restricted records...