Add unit-tests for the new API endpoint listing the pending ACL requests