http_jmap: upload collection always opens a mailbox

This includes a couple of refactors:

1. double pointer variable names suffixed with 'p'.
2. ACL check hoisted out of lookup.
3. two different sets of ACL set code changed to both work the same way