Update AclHelper.php

Correction of variable name used throughout getAllowedActionsByUserId(), swapped from $roleId to $userId