Filter search results by ACL

We should not really show search results for private projects to not
authenticated users.

Fixes #468

Signed-off-by: Michal Čihař <michal@cihar.com>