Correctly handle pagination for results that are not viewable by the user

The current implementation filters out the results that are not viewable by the user, but does not properly clean up the response and, as a consequence, the pagination might be broken (results with "holes").

One idea to fix this was that, after filtering out all the results that are not viewable, a second query would be run but having an extra query filter that excludes all the IDs of the results that were previously filtered. This way we are sure that the second query returns a correct result, with correct pagination, total number of results, highlighting, faceting, etc. To try to minimize the performance penalty introduced by this second query, we could try to disable highlighting and faceting for the first query because we are not going to use them any way.