Support AccessControlManager in MockSession

Since the access control mngr is accessed more, also unit tests mocking jcr sessions hit this more frequently

Also make the MockSession constructors public. Now we see code like

session = new MockSession(rootNode, queryManager){
@Override
public String getUserID()

{ return "user-id"; }

};

to get a mock session without mocking a jcr node