WorkflowManager permission checks fixes

The #getWorkflowDescription(String, Document) incorrectly performs the permissions check using the workflow session instead of the user session.
In practice this means the check will always succeed.

For initiating the workflow logging, it uses the user session to check access on the /hippo:log folder, while in this case it actually should use the workflow user session.