Store jcr:all in the content and update upon privilege registration

in the light of the access control implementation the special handling
of the jcr:all privilege doesn't work any more (see also TODO in the code).

instead it should be stored in the content along with the other privileges
and needs to be updated upon successful privilege registration AFTER the
PrivilegeValidator performed the validation of the new privilege.