Fix Private media

Private and unlisted media was no longer showing up in lists.

This happened because we removed the 'manager feed and media' view and replaced it with the regular MediaList view.  This pull request adds a privacy filter to the MediaList to show private and unlisted media that logged-in users have access to.

This PR also adds tests and fixes a few other errors that I found along the way.
Good point, this was just a quick fix to a problem that I was seeing and deserves more thought.

The vagrant box for the project has a timezone of UTC.
Mysql is using the system's timezone.
PHP is using the America/Chicago timezone.

So, perhaps it would be better set the timezone in mysql to America/Chicago before running queries?

I'm also not sure that this query is necessary.  In what case would m.datecreated be > now()?