Split the PackageListingAcl.get_or_create into two methods: get and create
If we are not creating a new PackageListingAcl, only update the ACL status if it changed

Fixes https://fedorahosted.org/pkgdb2/ticket/9 (point 3)
Check if the set_acl_package returned a message, otherwise do not flash that something changed