Issues/464

This is branched from https://github.com/freedomofpress/securedrop/pull/463, and resolves #464.  This adds filters for the journalist interface, both the overview of sources and list of documents.  It also makes sure that any souces / submissions that are not visible will not be deleted/starred/unstarred.  Only visible items will be acted upon.  This preserves the graceful degradation of both `index` and `col`.
Nit: we should normalize on either `sid` or `filesystem_id` (longstanding issue, not your fault)