System - Change ACL rest api to make more sense

[dvstans]

The current acl related rest calls have paths that do not reflect their functionality. For example, /acl/by_subject/list?owner=x returns the records and collections that have acls set from a specific owner to share these items with the current client, so it should be /acl/list/shared_items?owner=x