Add authorization check to LoggingServlet

The patch adds an authorization check to the logging servlet. By default the logging servlet will check for hippo:admin privileges on the /content/documents node.

It would be nice to backport this to 7.4 as well. The patch is made against trunk, but should apply to the 2.16.xx branch as well.