Add the possibility to not include the ACLs when representing PackageListing as json
Add the possibility to exclude the ACLs from the output of /api/package/
Add unit-tests for /api/package with no acls info