NOJIRA Fix ACL filtering for search results

- Moved redundant code from SearchEngine and BrowseEngine to
BaseFindEngine
- Less redundant code in filterHitsByACL()
- Correct ACL filtering for users that don't have restrictions.
Previously we would deny access to all items where any exception
existed, even when the default was read or higher.