JCR-2113: Writing access control

This patch addresses the following as indicated in https://issues.apache.org/jira/browse/JCR-2113:
a. adjust jcr2dav module and make sure the RepositoryConfig gets a valid ac-provider configuration parameter set
b. complete setPolicy, Batch#setTree, + testing
c. complete removePolicy for jcr2spi and complete implementation for removal of protected items on jcr-server.

as discussed last friday: i would suggest you add the editing session as parameter here instead of having the init method.