Publication validation

set access to admin only on the allUsers subscription.
changed the privacy option to be a whitelist instead of a blacklist.

I think I got all the properties but i might have missed something.
Also, Im not sure that profile.notifications should actually be exposed, as it seems to be a server setting for wether to create notifications for different cases or not? But I wasn't sure.