Support server side playlist access control exclusion

* only run when enableAccessControlExclusion var is set. 
* isAccessControlAllowed was only being run for entries, so not clear
why it had a request entry lookup; commented out, could warrant further
investigation.