SolrServletFilter does not hide unpublished documents from other users