Update: add access control mgt support for jcr2spi

as per our discussion: less untangle JcrSupportedPrivilegeReport from JcrPrivilegeReport. JcrPrivilegeReport is about permissions of the current user in this session, and has nothing to do with with the acl system at all.

rather extend the base report class