LPS-49379 Fix url injection showing private sites to invalid users in my...

... sites portlet