Filtering out geometries for unauthorized access

Carefully test, as I do'nt know exactly how the result, either a JSON or a GeoJSON is used in the makos. If it has to be a geometry, we should use a dummy one.
@procrastinatio I think this is a tricky one. Feature requests and htmlpopu request have `params.layerId` and they work fine

But find and identify requests have `params.layers` (as it can contain multiple layers) and find requests have `params.layer`. So we would need to adapt this if statement to get it to work for those services.