Optimized getAllowedResources(sess,facility,user)

 - use single sql query instead of one query per each resource assigned
	 on facility