fix access result caching

    // This form's cacheability may have been changed as it is now based
    // on the current user and permissions.
    // TODO: is this line enough?
    $access->addCacheableDependency($form);

I'm not actually sure what this line does.

I do suspect though that we should be adding cachePerUser() and cachePerPermissions() here.